2018 BSA GLOBAL CLOUD COMPUTING SCORECARD - Powering a Bright Future - BSA | The Software ...

Page created by Emily Bowman
 
CONTINUE READING
2018 BSA GLOBAL CLOUD COMPUTING SCORECARD - Powering a Bright Future - BSA | The Software ...
2018 BSA GLOBAL CLOUD
COMPUTING SCORECARD
      Powering a Bright Future
2018 BSA GLOBAL CLOUD COMPUTING SCORECARD - Powering a Bright Future - BSA | The Software ...
CONTENTS
    EXECUTIVE SUMMARY .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  . 1
        BSA Cloud Policy Blueprint .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  . 3

    KEY FINDINGS .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  . 5
        CUTTING-EDGE TECHNOLOGIES: Cloud Computing Is the
        Catalyzer of the Benefits Created by Cutting-Edge Innovations.  .  .  .  .  .  .  . 6
        DIGITAL TRADE: Unleashing Social Benefits and Economic Growth
        through Modern Trade Rules .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  . 10

    SCORECARD METHODOLOGY .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  . 11

    USING THE SCORECARD .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  . 14

    ABOUT BSA .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  . 24

    ABOUT GALEXIA .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  . 24

B                                                                                                                          BUSINESS SOFTWARE ALLIANCE
EXECUTIVE SUMMARY
Five years is an extremely long time in today’s technology-driven era, and
the global cloud computing market has grown exponentially in the five
innovation-filled years since BSA | The Software Alliance launched the initial
Global Cloud Computing Scorecard.

Consider just a few changes: In 2012 when BSA                            These new rankings put additional emphasis on the
released the first Scorecard, the demand for cloud                       policy areas that matter most to cloud computing,
computing came largely from start-ups and other                          such as privacy laws that protect data without
small companies. In 2018, though, analysts predict that                  unnecessarily restricting its movement across borders
more than half of enterprises will have adopted cloud                    and cybersecurity regimes that promote the proper
computing worldwide and that cloud applications,                         protection of consumer and business data without
platforms, and services will continue to radically                       freezing into place outdated and unneeded regimes.
change the way enterprises compete for customers.1                       In addition, questions to assess intellectual property
Governments, recognizing the cost-effective and                          protections have been extensively revised to focus
far-reaching power of the technology, are increasingly                   on cloud-relevant issues, including new questions on
adopting cloud-based tools as well. According to                         trade secrets and patents.
market experts, between 2012 and 2015 the demand
for cloud computing accounted for 70 percent of                          Using the Scorecard, BSA has tracked the evolution
related IT market growth — and it is expected to                         of the legal and regulatory environment for cloud
represent 60 percent of growth through 2020.2                            computing in 24 countries around the world. This
                                                                         year’s results clearly demonstrate several important
In light of that growth — and changes in markets                         points. The new methodology reveals a similar overall
around the world — BSA opted to update the way                           pattern. The rankings fall into three general categories
it ranks countries’ preparedness for the adoption                        with a group of top-performing countries (e.g., the EU
and growth of digital services. The result of that re-                   nations, Japan, the United States, Australia, Singapore,
examination is the 2018 BSA Global Cloud Computing                       and Canada) being pursued by countries like Korea,
Scorecard, the newest and most comprehensive                             Mexico, Malaysia, and South Africa. Bringing up the
version of the only report to regularly track change                     rear are a small group of nations that have failed to
in the international policy landscape for cloud                          embrace the international approach: Russia, China,
computing.                                                               Indonesia, and Vietnam.

1
    Predictions 2018: Cloud Computing Accelerates Enterprise Transformation Everywhere, Forrester (Nov. 7, 2017), available at: https://www.
    forrester.com/report/Predictions+2018+Cloud+Computing+Accelerates+Enterprise+Transformation+Everywhere/-/E-RES139611.
2
    The Changing Faces of the Cloud: Technology Companies Are Adapting to Sell Cloud to the Growing Number of More-Mainstream Buyers,
    Bain & Company, Mark Brinda and Michael Heric (2017), available at: http://www.bain.com/Images/BAIN_BRIEF_The_Changing_Faces_of_
    the_Cloud.pdf.

www.bsa.org/cloudscorecard                                                                                                                 1
Countries continue to update and refine
their data protection regimes — most often
in a way that ensures important cross-border
                                                             ÂÂ Russia’s laws on both privacy and cybercrime do not
data transfers.
                                                                follow recognized international standards. Russia
                                                                requires data operators to store the personal data
                                                                of Russian citizens on servers based in Russia. This
Among the other key findings of the                             data localization requirement has a significant
2018 Scorecard:                                                 negative impact on the digital economy.

                                                             ÂÂ Vietnam falls short in several key policy categories,
Advanced privacy and security policies set                      scoring just one point for security (with no national
leading countries apart from lagging markets                    cybersecurity strategy in place) and just half a point
                                                                in efforts to promote free trade.
ÂÂ Countries continue to update and refine their data
   protection regimes — most often in a way that
   ensures important cross-border data transfers.            Deviations from widely adopted regimes
   Canada again scored highest in the privacy                and international agreements hold back
   category based on its comprehensive legal regime
                                                             key markets
   that avoids onerous registration requirements.
                                                             ÂÂ Japan, which has finished atop the rankings in
ÂÂ Japan now has a new central regulator in place to
                                                                every previous version of the Scorecard, scores
   accompany its recently adopted comprehensive
                                                                strongly in most policy categories but its scores
   privacy legislation, and those elements are
                                                                slip sharply in Support for Industry-Led Standards
   complemented by effective enforcement provisions.
                                                                and International Harmonization of Rules. It is the
ÂÂ Turkey adopted its new Law on Personal Data                  only leading market to not have a general law on
   Protection in 2016 (in addition to signing the               e-commerce.
   Convention on Cybercrime, which came into
                                                             ÂÂ The Budapest Convention on Cybercrime is the
   force in Turkey in 2015). These developments
                                                                first international treaty that aimed to harmonize
   help to create a positive environment for building
                                                                national laws, improve investigative techniques, and
   consumer trust in cloud services.
                                                                increase cooperation among nations in order to
ÂÂ Several countries, however, still have not adopted           fight Internet and computer crime. The convention
   adequate privacy laws. Brazil and Thailand do not            has been widely adopted or mirrored through
   have comprehensive laws, and the laws in China,              national regimes. Only two countries have failed to
   India, Indonesia, and Vietnam remain very limited.           follow their lead: China and Korea.

                                                             ÂÂ Internationally accepted standards, certification,
Emerging markets continue to lag in the                         and testing help improve the security environment
                                                                for cloud computing, but not every country
adoption of cloud-friendly policies, hindering
                                                                recognizes such best practices as meeting local
their growth
                                                                standards. The holdouts include countries that
ÂÂ Indonesia continues to update and reform laws                might be expected to have protectionist policies
   and regulations in the information technology (IT)           (e.g., China, Indonesia, Russia, and Vietnam), but
   sector, but the result has not been positive for cloud       they also include countries like Argentina, India,
   computing. Regulations impose significant barriers           Mexico, and South Africa.
   for cloud service providers, including requirements
   for providers to register their services with a central
   authority and rules that force some providers to
   establish local data centers and hire local staff.

2                                                                                              BSA | The Software Alliance
BSA CLOUD POLICY BLUEPRINT
           The economic growth predicted to flow from cloud computing — and the resulting
           transformation of both businesses and national economies — is predicated on the proper policies
           being in place in each of the seven areas used in the BSA index:

           ÂÂ Ensuring privacy: The success of cloud computing depends on users’ faith that their
              information will not be used or disclosed in unexpected ways. At the same time, to maximize
              the benefit of the cloud, providers must be free to move data through the cloud in the most
              efficient way.

           ÂÂ Promoting security: Users must be assured that cloud computing providers understand and
              properly manage the risks inherent in storing and running applications in the cloud. Cloud
              providers must be able to implement cutting-edge cybersecurity solutions without being
              required to use specific technologies.

           ÂÂ Battling cybercrime: In cyberspace, as in the real world, laws must provide meaningful
              deterrence and clear causes of action. Legal systems should provide an effective mechanism
              for law enforcement, and for cloud providers themselves, to combat unauthorized access to
              data stored in the cloud.

           ÂÂ Protecting intellectual property: In order to promote continued innovation and technological
              advancement, intellectual property laws should provide for clear protection and vigorous
              enforcement against misappropriation and infringement of the developments that underlie
              the cloud.

           ÂÂ Ensuring data portability and the harmonization of international rules: The smooth flow
              of data around the world — for example, between different cloud providers — requires efforts
              to promote openness and interoperability. Governments should work with industry to develop
              standards, while also working to minimize conflicting legal obligations on cloud providers.

           ÂÂ Promoting free trade: By their very nature, cloud technologies operate across national
              boundaries. The cloud’s ability to promote economic growth depends on a global market that
              transcends barriers to free trade, including preferences for particular products or providers.

           ÂÂ Establishing the necessary IT infrastructure: Cloud computing requires robust, ubiquitous,
              and affordable broadband access. This can be achieved through policies that provide
              incentives for private sector investment in broadband infrastructure and laws that promote
              universal access to broadband.

           The move to the cloud and capitalization on its benefits across the board is hardly inevitable,
           and an urgent task lies ahead for governments. In order to obtain the benefits of the cloud,
           policymakers must provide a legal and regulatory framework that will promote innovation, provide
           incentives to build the infrastructure to support it, and promote confidence that using the cloud
           will bring the anticipated benefits without sacrificing expectations of privacy, security, and safety.

www.bsa.org/cloudscorecard                                                                                          3
The ability of countries and companies                                  Increased emphasis on IT Readiness and
to leverage cloud computing for growth                                  Broadband Deployment leads to interesting
requires that they be able to access a                                  results
powerful network; the new methodology
                                                                        ÂÂ The ability of countries and companies to leverage
puts increased emphasis on the IT Readiness,                               cloud computing for growth requires that they
Broadband Deployment category.                                             be able to access a powerful network; the new
                                                                           methodology puts increased emphasis on the IT
                                                                           Readiness and Broadband Deployment category.
                                                                           Although almost all countries continue to work to
Those few countries that have embraced
                                                                           improve broadband penetration, the success of
localization policies pay a heavy price
                                                                           those efforts remains very inconsistent.
ÂÂ After years of concerns about restrictive policies in
                                                                        ÂÂ Singapore, Japan, and Korea score highest in the
   Russia, the effect of those policies are becoming
                                                                           category — boosted by the successful efforts to
   more clear. This year, for the first time in the history
                                                                           boost their national broadband plans.
   of the Scorecard a country finished with a zero
   in one of the scoring categories. Russia’s failure                   ÂÂ Certain countries’ high IT Readiness scores may
   to embrace technology neutrality in government                          be masking weaknesses in other areas of cloud
   procurement and its cumbersome Internet filtering                       policy. For example, when infrastructure scores
   and censorship regulations act as a barrier to cloud                    are removed, Japan ranking plummets from No. 2
   computing.                                                              to No. 10. Likewise, Korea scores nearly 20 points
                                                                           for IT Readiness and rounds out the top tier of
ÂÂ These policies are not without financial effects.
                                                                           countries in the rankings. But it finishes much closer
   Consider that in 2012 the research firm IDC found
                                                                           to middle-tier countries like Mexico and South
   that Russia’s cloud computing market had grown
                                                                           Africa in an examination of the countries’ pure
   more than 417 percent to nearly $60 million and
                                                                           policy rankings.
   was projected to continue to grow by more than
   50 percent in the years ahead.3 By 2017, though,
   IDC was finding growth in the Russian cloud market
   of just 9.9 percent — far behind the global growth
   of 19 percent.4

ÂÂ Vietnam also continues to impose severe
   censorship and restrictions on Internet content.
   That fact is further complicated by the country’s
   failure to develop appropriate laws on government
   procurement and other trade barriers.

3
    Oleg Kouzbit, Report: Russian Cloud Market to Top $460 Million by 2015 (September 25, 2012), available at: http://www.ewdn.
    com/2012/09/25/report-russian-cloud-market-to-top-460-million-by-2016/.
4
    IDC, Russia Cloud Services Market 2016–2020 Forecast and 2015 Vendor Shares, (September 2016), available at: https://www.idc.com/
    getdoc.jsp?containerId=CEMA40565616; Forbes, Roundup of Cloud Computing Forecasts, 2017, (April 29, 2017), available at: https://www.
    forbes.com/sites/louiscolumbus/2017/04/29/roundup-of-cloud-computing-forecasts-2017/#144a9d7f31e8.

4                                                                                                              BSA | The Software Alliance
KEY FINDINGS
Five short years ago, cloud computing was a new tool — a next-generation
technology that promised to help companies and countries unlock greater
productivity and expanded economic growth. It was with that perspective
that BSA | The Software Alliance launched the Global Cloud Computing
Scorecard — a resource to help policymakers shape the proper legal and
regulatory environment to encourage the growth of the cloud in their
markets.

Fast forward to today and cloud computing is a widely        affordable broadband, which requires policies that
adopted technology that powers global businesses             provide incentives for private sector investment in
and helps governments better connect with their              broadband infrastructure and laws that promote
citizens on a daily basis. Based on that evolution           universal access to broadband.
BSA | The Software Alliance believed that 2018
presented an opportunity to step back and reassess        Some basic fundamentals have not changed. IT
the Scorecard — the only report to regularly track        remains integral to every nation’s economic growth.
change in the relevant international policy landscape.    Cloud computing adds to the importance of IT by
With companies and governments increasingly               increasing access to technology that drives economic
moving their key IT processes to the cloud, the mix       growth at the global, national, and local levels.
of important policy considerations has become             Cloud computing democratizes the use of advanced
increasingly clear:                                       technologies. It allows anyone — a start-up, an
ÂÂ Privacy laws must ensure the proper protection         individual consumer, a government, or a small business
   for users’ data without restricting the ability of     — to access technology previously available only to
   companies and users to move data across borders        large organizations. These services in return have
   to maximize its value.                                 opened the door to unprecedented connectivity,
                                                          productivity, and competitiveness.
ÂÂ Security laws must help shape an environment
   where cloud computing providers can implement          Countries that offer a policy environment in which
   cutting-edge cybersecurity solutions without           cloud-computing services can flourish gain in
   being handcuffed by requirements to use specific       productivity and economic growth. The countries with
   technologies. Users also must be able to trust         the most favorable policies are those in which the
   that cloud computing providers understand and          free movement of data, privacy, intellectual property
   properly manage the risks inherent in storing and      protections, robust deterrence, and enforcement of
   running applications in the cloud.                     cybercrime are all important priorities. Many countries
                                                          also recognize that coordination of national cloud
ÂÂ When it comes to delivering the cloud, countries       computing policies with those of other nations will
   must invest in the appropriate infrastructure. Cloud   facilitate benefits for all countries participating in the
   users must have access to robust, ubiquitous, and      global economy.

www.bsa.org/cloudscorecard                                                                                             5
ISSUE
     BRIEF

    CUTTING-EDGE TECHNOLOGIES: Cloud Computing Is the
    Catalyzer of the Benefits Created by Cutting-Edge Innovations
    One of the many benefits of cloud computing is that it catalyzes the positive effect of cutting-edge
    technologies, generating societal benefits and economic growth. Policies that create an environment
    conducive to cloud computing will produce significant, positive results as these new technologies
    evolve.

    Examples of cutting-edge technologies enabled by cloud computing include:
    ÂÂ Cloud computing allows a tremendous amount of data, collected from multiple locations, to be
       stored and analyzed in a cost-effective way. This enables data analytics to be performed on a large
       scale.
    ÂÂ Artificial intelligence uses vast amounts of data to “train” algorithms to solve complex problems and
       achieve certain goals. Cloud computing allows this data to be collected and analyzed efficiently.
    ÂÂ There are multiple uses for blockchain technology from financial transactions to manufacturing,
       and many new uses are constantly emerging. Cloud computing allows participants in blockchain
       transactions to remotely record information in decentralized ledgers and subsequently access them.

    The cloud not only enables cutting-edge technologies to function, but it facilitates access to these
    technologies. Governments, businesses, and even individuals can take advantage of data analytics,
    artificial intelligence, blockchain solutions, or other technologies developed by third parties who offer
    cloud-based solutions. This is done in a very cost-effective way, with minimum upfront investment by
    the user. Thus, the benefits of these technologies become exponentially larger through the use of cloud
    computing.

    These cutting-edge technologies, enabled or substantially improved by the use of cloud computing are
    creating benefits in nearly every industry sector. The automotive industry is one of many examples. In
    the automotive industry, companies leverage the cloud to increase productivity. They use data analytics
    to improve accuracy in demand forecasting and adjust production plans. Proactive maintenance
    powered by artificial intelligence-enabled tools reduces unscheduled downtime of machinery. The need
    for costly repairs and recalls can also be substantially reduced by the use of blockchain technology to
    more efficiently track faulty components.

    The benefits of innovations powered by cloud computing and enabled by emerging technologies
    are not only available to large corporations. Small- and medium-sized enterprises can — and in many
    cases already are — leveraging these technologies. For instance, family-owned restaurants can use
    data analytics software to better predict demand, which allows them to adjust supply orders and staff
    schedules accordingly; local firms can grow their business by leveraging software that uses artificial
    intelligence to make recommendations on which sales leads to prioritize; and accounting firms can
    improve the efficiency of their business by using blockchain technology to streamline compliance with
    regulatory requirements.

    Emerging technologies have the potential to improve our lives even further. But this can only be
    achieved if cloud computing can continue to be leveraged. It is, therefore, crucial that countries
    continue to strive to create an environment that favors the continued development and deployment
    of cloud computing so that these technologies continue to promote societal benefits and economic
    growth.

6                                                                                     BSA | The Software Alliance
But countries inhibiting, or failing to support, the use
of cloud computing will not keep pace with those
embracing the tool.

The Scorecard has for five years ranked the IT             The 2018 Scorecard shows continuing
infrastructure and policy environment — or cloud           improvements in the policy environment for
computing readiness — of 24 countries that account
for 80 percent of the world’s IT markets. Each country
                                                           cloud computing in key global economies.
is graded on its strengths and weaknesses in seven key
policy areas. The 2018 BSA Global Cloud Computing
Scorecard, though, focuses new attention on the policy     Unfortunately, privacy laws are still absent or
areas that matter most to cloud computing.                 insufficient in several countries. Brazil and Thailand
                                                           have no comprehensive laws in place, while laws in
The 2018 Scorecard shows continuing improvements           China, India, Indonesia, and Vietnam remain very
in the policy environment for cloud computing in           limited.
key global economies since the 2016 version of the
Scorecard.                                                 A small number of countries have adopted or
                                                           proposed prescriptive data localization regimes that
These new rankings put additional emphasis on the          would require cloud providers to restrict the free flow
policy areas that matter most to cloud computing,          of data or build costly — and unnecessary — servers in
things like privacy laws that protect data without         order to provide services in a specific market.
unnecessarily restricting its movement across borders
and cybersecurity regimes that promote the proper          Canada and Mexico score highest in the privacy
protection of consumer and business data without           section, offering comprehensive privacy regimes
freezing into place outdated and unneeded regimes.         without onerous registration requirements. Countries
In addition, questions to assess intellectual property     with no laws (Brazil and Thailand) and countries with
protections have been extensively revised to focus         prescriptive data localization requirements (such as
on cloud-relevant issues, including new questions on       Russia and Indonesia) score poorly in this section.
trade secrets and patents.

                                                           Security
Data Privacy
                                                           Users of cloud computing and other digital services
Cloud users need to trust that their data, which may       need to be certain that cloud service providers can
be stored anywhere in the world, will not be used          manage the security risks of storing their data and
or disclosed by a cloud provider in unauthorized           running their applications on cloud systems. Large-
ways. Countries can provide these assurances with          scale national and international cybersecurity attacks
appropriate privacy laws. But it is a delicate balance —   are now common.
unnecessarily burdensome restrictions will hinder the
                                                           This section examines how countries manage and
important advantages of cloud computing that users
                                                           regulate cybersecurity, security certification, and
want and need.
                                                           security testing.
This section of the Scorecard examines how countries
                                                           This year’s Scorecard indicates that many countries
are managing these competing interests. Overall, the
                                                           have implemented national cybersecurity strategies.
concern for privacy has produced many positive results
                                                           Many of these national strategies promote a joint
across jurisdictions, including significant law reform
                                                           public-private approach to the management of
and a greater public awareness of data privacy issues.
                                                           cybersecurity. Overall, this is a positive development,
Most countries in the Scorecard have data                  although Argentina, Mexico, and Vietnam are yet to
protection frameworks in place and have established        develop and implement strategies.
independent privacy commissioners. Many of the data
protection laws are now being updated to meet new
international standards — such as the European Union
General Data Protection Regulation (GDPR) and the
APEC Cross Border Privacy scheme (CBPRs).

www.bsa.org/cloudscorecard                                                                                           7
The Scorecard also asks whether local laws and
                                                          policies on access to data by law enforcement
                                                          authorities avoid technology specific mandates (e.g.,
                                                          requirements for specific tools that allow access to
Overall, the Scorecard finds that most                    encrypted data). These mandates may act as a barrier
countries are rising to the challenge of                  to the supply of security products and services. There
protecting data from cyberattack and                      was a wide divergence on this issue and on other
                                                          issues related to the investigation and prosecution of
physical security breaches.
                                                          cybercrime.

Most cloud computing applications are designed to         Intellectual Property Rights
meet internationally recognized security standards,
                                                          As with the creators of other highly innovative and
and this approach is supported by most countries in
                                                          fast-evolving products, providers of cloud computing
the Scorecard. This means that a product tested in
                                                          services rely on a combination of patents, copyrights,
one country can be recognized in other countries.
                                                          trade secrets, and other forms of intellectual property
However, the Scorecard reveals that some overly
                                                          protection. To encourage investment in cloud
prescriptive security requirements that duplicate
                                                          research and development, intellectual property
accepted international standards and impose onerous
                                                          laws must provide clear protections and effective
local requirements have been introduced. For
                                                          enforcement of misappropriation and infringement.
example, China, India, and Korea have all introduced
                                                          Online intermediaries should be offered incentives to
some local security testing requirements.
                                                          operate responsibly and should enjoy safe harbor from
The United Kingdom, Germany, France, Australia, the       copyright liability when they do so.
United States, and Japan score highest in the security
                                                          This section examines the intellectual property
section. Mexico, Argentina, and Vietnam record the
                                                          protections in place in the countries studied, as well as
lowest scores — mainly due to delay in implementing
                                                          their approaches to implementation and enforcement.
national cybersecurity strategies.
                                                          The Intellectual Property criteria for this year’s
                                                          Scorecard was extensively revised to focus on issues
Cybercrime                                                that are most relevant to cloud computing, including
                                                          new questions on trade secrets and patents.
The huge quantities of data that companies and
governments store in their computer networks have         The United Kingdom, Singapore, and the United
long attracted the attention of bad actors. In order      States all score very highly in the Intellectual Property
to protect data holders and deter cyber criminals,        section, reflecting their combination of modern laws
governments must use legislative, investigative, and      and effective enforcement. Unfortunately, many
enforcement tools.                                        countries struggled to achieve good results in this
                                                          section, with Vietnam, Malaysia, Turkey, and India
This section examines cybercrime laws, as well as rules   recording the lowest scores. However, numerous
relating to investigation and enforcement.                proposed and draft laws and regulations exist across
                                                          the countries in the study, and this may be a section
Overall, the Scorecard finds that most countries are
                                                          where we see strong improvements in the coming
rising to the challenge of creating legal regimes to
                                                          years.
protect data from cyberattack and physical security
breaches. Most countries studied have legislation to
combat the unauthorized access of data stored in the      Support for Industry-Led Standards and
cloud. Most also have implemented cybercrime laws,        International Harmonization of Rules
many of which are compatible with the Convention on
Cybercrime. Italy, Japan, Poland, and Spain all score     Users need data portability and seamless
very highly in this section of the Scorecard.             interoperable applications if they are to make full use
                                                          of cloud-computing services and the digital economy.
Unfortunately, a few key jurisdictions still have gaps    IT industry organizations are developing international
and inconsistencies in their cybercrime laws. China and   standards that will ensure optimal portability.
Vietnam score poorly in this section of the Scorecard.    Government support for these voluntary, industry-

8                                                                                           BSA | The Software Alliance
led efforts is highly important. Countries must also
promote global harmonization of e-commerce rules,
tariffs, and relevant trade rules.

This section examines the extent to which                   Despite major infrastructure improvements
governments have encouraged industry-led processes          underway in a number of countries,
and promoted harmonization of e-commerce rules.
                                                            broadband penetration remains very
The Scorecard reveals that some countries have              inconsistent.
moved away from accepting international standards
and international certifications, most notably China,
India, Indonesia, Korea, and Russia.
                                                            IT Readiness and Broadband Deployment
Although tariffs and trade barriers for online software
                                                            Digital economies and cloud computing require
and applications continue to be rare, they continue
                                                            extensive, affordable broadband access, which in
to hinder new technology products used to access
                                                            turn requires incentives for private sector investment
cloud services in a few countries. Argentina, Brazil, and
                                                            in infrastructure and laws and policies that support
Russia all score poorly in this section.
                                                            universal access.

                                                            This section of the Scorecard examines and compares
Promoting Free Trade
                                                            the infrastructure available in each country to support
Cloud services operate across national boundaries,          the digital economy and cloud computing. It is
and their success depends on access to regional and         based on detailed comparative statistics on a range
global markets. Restrictive policies that create actual     of important IT indicators, including the presence of
or potential trade barriers will inhibit or slow the        a national broadband plan, a country’s International
evolution of cloud computing.                               Connectivity Score and International Internet
                                                            Bandwidth. In addition, the Scorecard includes
This section examines government procurement                statistics on the number of subscribers for key services,
regimes and the existence or absence of barriers to         such as mobile broadband subscriptions.
free trade, including each country’s requirements and
preferences for particular products. The section also       Despite major infrastructure improvements underway
examines whether countries support international            in a number of countries, broadband penetration
efforts to standardize and liberalize trade and             remains very inconsistent. As a result, some countries
procurement policies, allow cloud providers to              continue to have low infrastructure scores. Countries
operate free from tariffs and other trade barriers, and     that do not yet have sufficient infrastructure continue
avoid laws or policies that impose data localization        to be at risk of missing the economic benefits of the
requirements.                                               digital economy and cloud computing.

The Scorecard indicates that a number of countries still    Singapore, Japan, and Korea achieve the highest
provide preferential treatment for domestic suppliers       results in this section of the report. As IT Readiness
in government procurement or have introduced other          and Broadband Deployment is worth 25 percent of the
barriers to international trade. Indeed, this section of    overall score in this year’s Scorecard, this strong result
the Scorecard reveals the widest divergence between         helps to lift the overall rankings for these countries.
countries. A small group of countries scored close          For example, Japan jumps from 10th in the Scorecard
to the maximum points — Canada, Germany, the                rankings to 2nd once the infrastructure scores are
United States, Poland, and Japan — while a number           included. Most of the other countries in the Scorecard
of countries score no points or almost no points,           receive a similar ranking whether or not infrastructure
including China, India, Vietnam, and Russia.                scores are included.

                                                            The poorest performers in this section of the Scorecard
                                                            are Vietnam, Indonesia, and India.

www.bsa.org/cloudscorecard                                                                                            9
ISSUE
      BRIEF

     DIGITAL TRADE: Unleashing Social Benefits and Economic Growth
     through Modern Trade Rules
     Data-driven innovation enabled by cloud computing powers the global economy, and its role will be
     even more prominent in the future. Business of all sizes and from across industry sectors increasingly
     use data by utilizing software and cloud computing services to increase productivity, create jobs, and
     improve lives. Governments around the globe also use data-driven innovations to better serve their
     citizens and grow their economies. Modern trade rules are needed to ensure these benefits continue.

     Technology has evolved tremendously in the years since most trade agreements were negotiated.
     The software industry has evolved from floppy disks and desktop computing to cloud-based solutions
     and smart devices. Innovation continues to move at a tremendous speed with the adoption of new
     technologies, including large-scale data analytics, artificial intelligence, and block chain.

     International trade rules, however, have not kept up with these changes. For example, trade agreements
     currently in force lack enforceable obligations ensuring that governments will not prevent data from
     moving from one place to another, which is essential to the data economy. The Trans-Pacific Partnership
     (TPP) agreement is the first multilateral trade agreement to create a legal framework enabling the
     unrestricted movement of data across borders. Even without continued United States participation
     in TPP, the other 11 governments have made clear their intention to apply these strong data flow
     obligations when the agreement takes effect.

     In addition, forward-looking governments are incorporating digital trade provisions in other multilateral
     and bilateral trade pacts they are pursuing. These agreements should include rules ensuring movement
     of data across borders, prohibiting data localization and forced technology transfer, promoting
     intellectual property protection, supporting cybersecurity, among others. For example, the United
     States, Canada, and Mexico are currently discussing modernizing the North American Free Trade
     Agreement along these lines.

     In Europe, however, advocates of including digital trade provisions in the European Union’s free trade
     agreements (FTAs) have confronted strong resistance, and this has led to a climate of uncertainty
     about the EU’s commitment to free international data flows. A recent European Commission proposal
     to include in its FTAs a prohibition of data localization measures, for example, also contains a broad
     and unconstrained exemptions for privacy measures. As a result, the prospective EU trade rule against
     localization could actually be counterproductive to the objective of free data flows.

     It is important that modern trade agreements include clear, binding, and forward-looking provisions on
     digital trade. This will allow data-driven innovation powered by cloud computing to continue improving
     lives and creating economic growth.

10                                                                                     BSA | The Software Alliance
SCORECARD METHODOLOGY
The BSA Global Cloud Computing Scorecard examines the legal and regulatory framework of 24 countries around
the world, identifying 72 questions that are relevant to determining readiness for cloud computing. The questions
are categorized under the aforementioned policy categories, and are generally framed so as to be answerable by
“yes” or “no.” The answers are also color coded:
 4    Indicates a positive assessment, which is generally considered to be an encouraging step toward
      the establishment of a favorable legal and regulatory environment for cloud computing.
 6    Indicates a negative assessment and the presence of a potential barrier to the establishment of a
      favorable legal and regulatory environment for cloud computing.

      Indicates that the assessment is positive in part, although some gaps or inconsistencies may exist
      that require further remedial work.

      Indicates a fact-finding question on relevant issues.

The Scorecard aims to provide a platform for discussion between policymakers and providers of cloud offerings,
with a view toward developing an internationally harmonized regime of laws and regulations relevant to cloud
computing. It is a tool that can help policymakers conduct a constructive self-evaluation, and determine the next
steps that need to be taken to help advance the growth of global cloud computing.

Responses for the infrastructure portion of the Scorecard are color coded based on the scale below. That is, the
“highest” answer to a particular question (e.g., the largest population or highest number of Internet users) is
indicated in bright green, and the color for other responses graduates down to the lowest response in red.

IT Readiness (Country Ranking Out of 24)

Highest                                                       Lowest

www.bsa.org/cloudscorecard                                                                                         11
2018 BSA Global Cloud Computing Scorecard

                      By focusing new attention on the policy areas that matter most
                      to cloud computing, the 2018 Scorecard shows continuing
                      improvements in the policy environment for cloud computing
                      in key global economies.

            84.0
     10.8                  82.1           82.0            81.8
                                                                        80.6          80.2          80.0
                     9.8            8.3                                                                           79.6            79.0
                                                   10.0
                                                                 10.5                                                                            78.4
                                                                                8.3          12.0           9.8            10.3                                 77.0
                                                                                                                                           9.8
                                                                                                                                                         10.3
                                                                                                                                                                                72.2
     10.8                          10.5
                    10.5                           11.0                         9.8                                                                                       9.5
                                                                 10.8                                      10.8
                                                                                                                            9.8            9.3
                                                                                              8.5
                                                                                                                                                          8.8

                                   11.5                                                                                                                                   7.5
     11.5                                                                      11.5
                    12.0
                                                    8.5
                                                                 11.5                         9.5          11.5            12.0           12.0
                                                                                                                                                         12.0

                                                                                                                                                                          8.0

                                   11.0            11.5
     10.3                                                                      11.5
                     9.0                                                                      9.5
                                                                 10.0                                      10.8                            9.8
                                                                                                                           11.0                                          10.8
                                                                                                                                                          8.8

     12.0           10.5           12.5            12.0                                      12.5
                                                                                9.0
                                                                 12.5                                                                     11.5
                                                                                                           11.5                                          12.5
                                                                                                                           11.5                                           9.0

                    10.0                                                        9.5
     10.5                          10.3             9.0
                                                                                             11.0                                                                         7.5
                                                                                                                                           9.5
                                                                  9.3                                       8.0
                                                                                                                            9.5                          10.0

                    20.3                                                       20.7
                                                   19.8                                                                                                                  19.9
     18.2                          18.0
                                                                                             17.0          17.3
                                                                 16.1                                                                     16.6
                                                                                                                           15.0                          14.7

                                          United       United
          Germany          Japan                                    Australia    Singapore      Canada            France          Italy          Spain          Poland          Korea
                                          States      Kingdom
Change
               +2           -1              -1            +5            +1            +1             -3             -3             -1             +1              -1            none
in Rank

          12                                                                                                                              BSA | The Software Alliance
Data Privacy

                                                                                                           Security

                                                                                                           Cybercrime

                                                                                                           Intellectual Property Rights

                                                                                                           Standards and International Harmonization

                                                                                                           Promoting Free Trade

                                                                                                           IT Readiness, Broadband Deployment
       60.6
                       59.3
11.5
                 6.5                 57.3
                               8.5                   54.3
                                               5.5                   51.8
                 8.8                                                               50.3
                                                               7.8
                                                                             1.8                   48.4          48.4
 3.0                           4.0             9.3                           8.0             1.8           4.0
                                                                                                                                45.0
11.0                                                                                         4.0                                                43.7
                              11.0                                                                         7.0            4.5
                                                               3.0
                 8.0
                                                                                             9.0
                                                                                                                                          3.8                 40.7
                                                              11.5          11.0                                                                        3.3
                                                                                                                          3.5             6.3
                                               8.5                                                                                                                         36.4
                                                                                                          10.0            8.0                           6.0
                 5.3                                                                                                                                                 4.8
 6.0
                               6.0                                                           6.5                                          7.0
                                                                                                                                                                     1.0
                                               5.0                                                                                                      9.5
                10.0                                                                                                                                                 7.0
11.8                                                           5.8           6.0                                          5.8
                              11.5                                                                         5.0
                                                                                            10.0                                          6.8
                                               8.5
                                                               7.8           7.3                                                                                     5.5
                                                                                                                          7.5
                                                                                                           9.8                                          6.0
                 7.3
                                                                                                                                          4.5
                                               6.5                                                                                                                   9.0
 8.3                                                                                         6.0
                               6.0                             5.3           4.8                                         15.7                           6.3
                                                                                                                                          2.8
                13.5
                                                                                                           5.8                           12.7
                                              11.1                          11.5            11.1
                              10.3                            10.8                                                                                      1.5          0.5
 9.1                                                                                                                                                                 8.6
                                                                                                                                                        8.2
                                                                                                           6.9

                                     South
       Mexico      Malaysia                          Turkey     Argentina          Brazil      Thailand          India          Russia          China    Indonesia     Vietnam
                                     Africa

        +2              -1            -1              +3              -1            +4             +2             -2              -4             +1            -3          none

             www.bsa.org/cloudscorecard                                                                                                                                    13
USING THE SCORECARD
       The Scorecard is derived from the 24 individual country reports, which are available online at
       www.bsa.org/cloudscorecard. Using these results, a weighted score has been allocated to a selection
       of key questions. A number of basic fact-finding questions are excluded from the scoring system. Each
       group of questions is weighted to reflect its importance to cloud computing. Each individual question is
       also weighted to reflect its importance within each group. The weights are shown in the following table:

                                                                                                                                      Value
     # THEME / QUESTIONS                                                                                               Weight      (out of 100)
DATA PRIVACY                                                                                                            12.5%         12.5
  1. Is a data protection law or regulation in place?                                                                    30%          3.75
  5. Is the data protection authority enforcing the data protection law or regulation in an effective and                20%           2.5
     transparent manner?
  6. Is the data protection law or regulation compatible with globally recognized frameworks that facilitate             10%          1.25
     international data transfers?
  7. Are data controllers free from registration requirements?                                                           10%          1.25
  9. Are cross-border data transfers free from arbitrary, unjustifiable, or disproportionate restrictions, such as       10%          1.25
     national or sector-specific data or server localization requirements?
 10. Is there a personal data breach notification law or regulation?                                                     10%          1.25
 11. Are personal data breach notification requirements transparent, risk-based, and not overly prescriptive?            10%          1.25
SECURITY                                                                                                                12.5%         12.5
  1. Is there a national cybersecurity strategy in place?                                                                20%           2.5
  2. Is the national cybersecurity strategy current, comprehensive, and inclusive?                                       20%           2.5
  3. Are there laws or appropriate guidance containing general security requirements for cloud service                   10%          1.25
     providers?
  4. Are laws or guidance on security requirements transparent, risk-based, and not overly prescriptive?                 20%           2.5
  5. Are there laws or appropriate guidance containing specific security audit requirements for cloud service            10%          1.25
     providers that take account of international practice?
  6. Are international security standards, certification, and testing recognized as meeting local requirements?          20%           2.5
CYBERCRIME                                                                                                              12.5%         12.5
  1. Are cybercrime laws or regulations in place?                                                                        40%            5
  2. Are cybercrime laws or regulations consistent with the Budapest Convention on Cybercrime?                           20%           2.5
  3. Do local laws and policies on law enforcement access to data avoid technology-specific mandates or other            20%           2.5
     barriers to the supply of security products and services?
  4. Are arrangements in place for the cross-border exchange of data for law enforcement purposes that are               20%           2.5
     transparent and fair?
INTELLECTUAL PROPERTY RIGHTS                                                                                            12.5%         12.5
  1. Are copyright laws or regulations in place that are consistent with international standards to protect cloud        20%           2.5
     service providers?
  2. Are copyright laws or regulations effectively enforced and implemented?                                             20%           2.5
  3. Is there clear legal protection against misappropriation of trade secrets?                                          10%          1.25
  4. Is the law or regulation on trade secrets effectively enforced?                                                     10%          1.25
  5. Is there clear legal protection against the circumvention of Technological Protection Measures?                     10%          1.25
  6. Are laws or regulations on the circumvention of Technological Protection Measures effectively enforced?             10%          1.25
  7. Are there clear legal protections in place for software-implemented inventions?                                     10%          1.25
  8. Are laws or regulations on the protection of software-implemented inventions effectively implemented?               10%          1.25

14                                                                                                                   BSA | The Software Alliance
Value
  # THEME / QUESTIONS                                                                                              Weight   (out of 100)
 STANDARDS AND INTERNATIONAL HARMONIZATION                                                                         12.5%       12.5
  1. Is there a regulatory body responsible for standards development for the country?                              10%        1.25
  2. Are international standards favored over domestic standards?                                                   20%         2.5
  3. Does the government participate in international standards setting process?                                    10%        1.25
  4. Are e-commerce laws or regulations in place?                                                                   30%        3.75
  6. Is there a law or regulation that gives electronic signatures clear legal weight?                              10%        1.25
  7. Are cloud service providers free from mandatory filtering or censoring?                                        20%         2.5
 PROMOTING FREE TRADE                                                                                              12.5%         5
  1. Is a national strategy or platform in place to promote the development of cloud services and products?         20%         2.5
  2. Are there any laws or policies in place that implement technology neutrality in government?                    10%        1.25
  3. Are cloud computing services able to operate free from laws or policies that either mandate or give            20%         2.5
     preference to the use of certain products services, standards, or technologies?
  4. Are cloud computing services able to operate free from laws, procurement policies, or licensing rules that     20%         2.5
     discriminate based on the nationality of the vendor, developer, or service provider?
  5. Has the country signed and implemented international agreements that ensure the procurement of cloud           10%        1.25
     services is free from discrimination?
  6. Are services delivered by cloud providers free from tariffs and other trade barriers?                          10%        1.25
  7. Are cloud computing services able to operate free from laws or policies that impose data localization          10%        1.25
     requirements?
 IT READINESS, BROADBAND DEPLOYMENT                                                                                 25%         25
  1. Is there a National Broadband Plan?                                                                            10%         2.5
  2. Is the National Broadband Plan being effectively implemented?                                                  10%         2.5
4.7. Personal Computers (% of households) (2015) – Average for all countries in this scorecard: 63%                 5%         1.25
5.1. ITU ICT Development Index (IDI) (2016) (score is out of 10 and covers 175 countries)                           20%          5
     – Average for all countries in this scorecard: 6.58
5.2. World Economic Forum Networked Readiness Index (NRI) (2016) (score is out of 7 and covers 139                  20%          5
     countries)
     – Average for all countries in this scorecard: 4.77
6.2. Internet Users (% of population) (2015) – Average for all countries in this scorecard: 67%                     5%         1.25
6.3. International Internet Bandwidth (total gigabits per second (Gbps) per country) (2015)                         5%         1.25
     – Total for all countries in this scorecard: 117,736 Gbps
6.4. International Internet Bandwidth (bits per second (bps) per Internet user) (2015)                              5%         1.25
     – Average for all countries in this scorecard: 97,747 bps
7.5. Average Broadband Data Connection Speed (total megabits per second (Mbps) per country) (Q1 2017)               5%         1.25
     – Average for all countries in this scorecard: 12 Mbps
     – Average peak for all countries in this scorecard: 70 Mbps
8.3. Proportion of Fiber-to-the-home/building (FttX) Internet Subscriptions (% of fixed broadband subscriptions)    5%         1.25
     (2015)
     – Average for all countries in this scorecard: 23%
9.3. Active Mobile Broadband Subscriptions (% of population) (2015)                                                 5%         1.25
     – Average for all countries in this scorecard: 77%
9.4. Average Mobile Data Connection Speed (total megabits per second (Mbps) per country) (Q1 2017)                  5%         1.25
     – Average for all countries in this scorecard: 11 Mbps

www.bsa.org/cloudscorecard                                                                                                            15
BSA Global Cloud Computing Country Checklist                                                                                         4 Yes 6 No       Partial

  # QUESTION                                                                                                              Argentina                  Australia               Brazil
    DATA PRIVACY
 1. Is a data protection law or regulation in place?                                                                          4                          4                    Draft
 2. What is the scope and coverage of the data protection law or regulation?                                            Comprehensive              Comprehensive          Not applicable
 3. Is a data protection authority in place?                                                                                  4                          4                     6
 4. What is the nature of the data protection authority?                                                               Sole commissioner          Sole commissioner       Not applicable
 5. Is the data protection authority enforcing the data protection law or regulation in an effective and transparent
                                                                                                                              4                          4                Not applicable
    manner?
 6. Is the data protection law or regulation compatible with globally recognized frameworks that facilitate                                        APEC framework
                                                                                                                         EU framework                                     Not applicable
    international data transfers?                                                                                                                  & EU framework
 7. Are data controllers free from registration requirements?                                                                 6                          4                     4
 8. Are there cross-border data transfer requirements in place?                                                            Detailed                   Detailed
                                                                                                                                                                         No requirements
                                                                                                                         requirements               requirements
 9. Are cross-border data transfers free from arbitrary, unjustifiable, or disproportionate restrictions, such as
                                                                                                                                                         4
    national or sector-specific data or server localization requirements?
10. Is there a personal data breach notification law or regulation?                                                           6                          4                    Draft
11. Are personal data breach notification requirements transparent, risk-based, and not overly prescriptive?            Not applicable                   4                Not applicable
12. Is an independent private right of action available for breaches of data privacy?                                         4                          6                     4
    SECURITY
 1. Is there a national cybersecurity strategy in place?                                                                     Draft                       4                     4
 2. Is the national cybersecurity strategy current, comprehensive, and inclusive?                                       Not applicable                   4
 3. Are there laws or appropriate guidance containing general security requirements for cloud service providers?                                         4
 4. Are laws or guidance on security requirements transparent, risk-based, and not overly prescriptive?                                                  4
 5. Are there laws or appropriate guidance containing specific security audit requirements for cloud service
    providers that take account of international practice?
 6. Are international security standards, certification, and testing recognized as meeting local requirements?                6                          4
    CYBERCRIME
 1. Are cybercrime laws or regulations in place?                                                                              4                          4                     4
 2. Are cybercrime laws or regulations consistent with the Budapest Convention on Cybercrime?                                 4                          4                     4
 3. Do local laws and policies on law enforcement access to data avoid technology-specific mandates or other
                                                                                                                              4
    barriers to the supply of security products and services?
 4. Are arrangements in place for the cross-border exchange of data for law enforcement purposes that are
                                                                                                                              4                          4                     4
    transparent and fair?
    INTELLECTUAL PROPERTY RIGHTS
 1. Are copyright laws or regulations in place that are consistent with international standards to protect cloud
    service providers?
 2. Are copyright laws or regulations effectively enforced and implemented?                                                   6
 3. Is there clear legal protection against misappropriation of trade secrets?                                                4                          4                     4
 4. Is the law or regulation on trade secrets effectively enforced?                                                           6                          4
 5. Is there clear legal protection against the circumvention of Technological Protection Measures?                           4                          4                     6
 6. Are laws or regulations on the circumvention of Technological Protection Measures effectively enforced?                   6                          4                     6
 7. Are there clear legal protections in place for software-implemented inventions?                                           4                          4                     4
 8. Are laws or regulations on the protection of software-implemented inventions effectively implemented?                                                4
    STANDARDS AND INTERNATIONAL HARMONIZATION
 1. Is there a regulatory body responsible for standards development for the country?                                         4                          4                     4
 2. Are international standards favored over domestic standards?                                                                                         4
 3. Does the government participate in international standards setting process?                                               4                          4                     4
 4. Are e-commerce laws or regulations in place?                                                                              6                          4                     6
 5. What international instruments are the e-commerce laws or regulations based on?                                                               UN Convention on
                                                                                                                        Not applicable                                    Not applicable
                                                                                                                                                    E-Contracting
 6. Is there a law or regulation that gives electronic signatures clear legal weight?                                         4                          4                     4
 7. Are cloud service providers free from mandatory filtering or censoring?                                                   4                          4                     4
    PROMOTING FREE TRADE
 1. Is a national strategy or platform in place to promote the development of cloud services and products?                    6                          4
 2. Are there any laws or policies in place that implement technology neutrality in government?                               6                                                6
 3. Are cloud computing services able to operate free from laws or policies that either mandate or give preference
                                                                                                                              4                          4                     4
    to the use of certain products services, standards, or technologies?
 4. Are cloud computing services able to operate free from laws, procurement policies, or licensing rules that
                                                                                                                                                                               6
    discriminate based on the nationality of the vendor, developer, or service provider?
 5. Has the country signed and implemented international agreements that ensure the procurement of cloud
                                                                                                                              6                          6                     6
    services is free from discrimination?
 6. Are services delivered by cloud providers free from tariffs and other trade barriers?                                     6                          4                     6
 7. Are cloud computing services able to operate free from laws or policies that impose data localization
                                                                                                                              4                                                4
    requirements?

         16                                                                                                                                            BSA | The Software Alliance
Canada              China              France             Germany                  India                 Indonesia             Italy

       4                                      4                   4                                                                  4
 Comprehensive          Sectoral        Comprehensive       Comprehensive              Sectoral             Comprehensive      Comprehensive
       4                   6                  4                   4                                               6                  4
Sole commissioner    Not applicable      Collegial body    Sole commissioner   Other government official    Not applicable      Collegial body

       4             Not applicable           4                   4                                         Not applicable           4

 APEC framework                                                                                                                                   A
                     Not applicable      EU framework        EU framework           Not applicable          Not applicable      EU framework
 & EU framework                                                                                                                                   &
       4                   6                  6                                           4                       6
    Detailed            Detailed           Detailed            Detailed                                          Brief            Detailed
                                                                                  Brief requirements
  requirements        requirements       requirements        requirements                                    requirements       requirements

                           6                                      4                                               6
       4                                                                                  6
       4                                                                            Not applicable
       4                  4                   4                   4                       4                                          4

       4                  4                   4                   4                       4                      4                   4
       6                  4                   4                   4                       4                                          4
                          4                   4                   4                       4                      4                   4
       4                  6                                                                                      6
                                                                                                                 4
       4                   6                  4                   4                       6                       6                  4

                          4                   4                   4                       4                      4                   4
       4                  6                   4                   4                       4                      4                   4
                                                                                          4                      4                   4

       4                  4                   4                   4                       4                                          4

       4                  4                   4                   4                                                                  4
       4                                      4                   4                                              6                   4
                          4                                                               6                      4
       6                                                                                  6
       4                                      4                   4                       4                                          4
       4                   6                                      4                       4                                          4
       4                                      4                                           6                                          4
       4                                      4                                           6                                          4

       4                  4                   4                   4                       4                      4                   4
       4                                      4                   4                                              6                   4
       4                  4                   4                   4                       4                      4                   4
       4                 Draft                4                   4                       4                      4                   4
  UNCITRAL Model    UN Convention on     UNCITRAL Model      UNCITRAL Model        UNCITRAL Model          UN Convention on     UNCITRAL Model
Law on E-Commerce     E-Contracting    Law on E-Commerce   Law on E-Commerce     Law on E-Commerce           E-Contracting    Law on E-Commerce
       4                  4                   4                   4                       4                      4                   4
       4                  6                                       4                                              6

       4                  4                   6                                           4                       6
       4                  6                                       4
       4                   6                                      4                       6                       6

       4                   6                  4                   4                                               6                  4

                           6                                                              6                       6
       4                                      4                   4                                                                  4
                           6                  4                                                                   6                  4
Japan                 Korea                     Malaysia                  Mexico              Poland                 Russia                 Singapore          S

     4                      4                           4                       4                   4                       4                       4
Comprehensive        Comprehensive                   Sectoral             Comprehensive       Comprehensive          Comprehensive               Sectoral         Co
     4                      4                           4                       4                   4                       4                       4
Collegial body   Other government official   Other government official     Collegial body    Sole commissioner   Other government official   Sole commissioner     C

                            4                                                   4                   4                                               4

APEC framework       APEC framework              APEC framework           APEC framework                             APEC framework           APEC framework
                                                                                               EU framework                                                        E
& EU framework       & EU framework              & EU framework           & EU framework                             & EU framework           & EU framework
     4                      4                           6                       4                                           6                       4
   Detailed             Detailed                    Detailed                 Detailed            Detailed               Detailed                 Detailed
 requirements         requirements                requirements             requirements        requirements           requirements             requirements        r

     4                                                  4                       4                   4                       6                       4
                            4                           6                       4                                           6                       6
                                                  Not applicable                4                                     Not applicable          Not applicable
     4                      4                           6                       4                   4                       4                       6

     4                      4                                                   6                   4                                               4
     4                                                                          6                   4                                               4
                                                        4                       4                   4                       4                       4
     4                                                                          4                                           6                       4
                                                                                6                                           6
     4                                                  4                       6                                           6

     4                      4                           4                       4                   4                       4                       4
     4                      6                                                   4                   4                                               4
     4                                                  6                       4                   4                       6

     4                      4                           4                       4                   4                                               4

     4                      4                                                                       4                                               4
     4                                                                          6                                           6                       4
                            4                           6                       4                   4                       4                       4
                            4                           6                       4                   4
                            4                           4                                                                                           4
                            4                           4                       6                                           6                       4
                            4                           6                       4                                                                   4
                            4                           6                                           6

     4                      4                           4                       4                   4                       4                       4
     4                                                  4                                           4
     4                      4                           4                       4                   4                       4                       4
                            4                           4                       4                   4                                               4
                    UN Convention on            UN Convention on           UNCITRAL Model      UNCITRAL Model       UN Convention on         UN Convention on      UN
Not applicable
                      E-Contracting               E-Contracting          Law on E-Commerce   Law on E-Commerce        E-Contracting            E-Contracting     Law
     4                      4                           4                       4                   4                       4                       4
     4                      6                           6                       4                   4                       6                       6

                            4                           6                       4                                           6
                            6                                                   4                                           6
     4                      6                           4                       4                   4                       6                       4

     4                      4                                                   6                   4                       6

                                                        6                       6                                           6
     4                      4                           4                       4                   4                       6                       4
     4                      4                           4                       4                   4                       6                       4
South Africa           Spain              Thailand           Turkey        United Kingdom           United States              Vietnam

     4                   4                  Draft              4                  4
 omprehensive      Comprehensive        Not applicable    Comprehensive     Comprehensive              Sectoral                 Sectoral
     4                   4                   6                 4                  4                       4                       6
Collegial body    Sole commissioner     Not applicable    Collegial body   Sole commissioner   Other government official     Not applicable

                         4              Not applicable                            4                       4                  Not applicable

EU framework        EU framework        Not applicable    EU framework       EU framework          APEC framework            Not applicable

                         6                   4                 6                  6                       4                       4
  Detailed            Detailed                              Detailed           Detailed                                          Brief
                                       No requirements                                             No requirements
requirements        requirements                          requirements       requirements                                    requirements

     4                                                         4                  4                       4                       6
     4                                       6                 6                                          4
     4                                  Not applicable    Not applicable
     4                   4                   4                 4                  4                       4                       4

     4                   4                   4                 4                  4                       4                       6
                         4                   4                 4                  4                       4                       6
     6                                       6                                    4                                               4
     6                                       6                                    4                                               6
     6                   6                   6                 6                  4                                               6
     6                   4                   6                 4                  4                       4                       6

     4                   4                   4                 4                  4                       4                       4
     4                   4                   4                 4                  4                       4
                         4                   6                 6                  6                       4                       6

     4                   4                   4                 4                  4                       4                       4

                         4                                                        4                       4
                                                               6                  4                       4
                         4                   4                                                            4
                                                                                                          4                       6
                                                               6                  4                       4                       4
     6                                       6                 6                  4                                               6
                         4                                     4                  4                       4                       4
     6                   4                   6                                    4

     4                   4                   4                 4                  4                       4                       4
     4                   4                   4                 4                  4                       4
     4                   4                   4                 4                  4                       4                       4
     4                   4                   4                                    4                       4                       4
 NCITRAL Model      UNCITRAL Model      UNCITRAL Model                       UNCITRAL Model                                  UNCITRAL Model
                                                              Other                                     Other
w on E-Commerce   Law on E-Commerce   Law on E-Commerce                    Law on E-Commerce                               Law on E-Commerce
     4                   4                   4                 4                  4                       4                       4
                                             6                 6                  4                       4                       6

     6                   6                   4                 4                  4                                               6
                         4                   6                 6                                          4                       6
                         4                   4                 4                  6                       4                       6

                         4                   6                 6                  4                       4                       6

     6                                       6                 6
     4                   4                                     4                  4                       4                       6
     4                   4                   4                                    4                       4                       6
BSA Global Cloud Computing Country Checklist (continued)                                                                                                               4 Yes 6 No      Partial

  # QUESTION                                                                                                                      Argentina                    Australia                     Brazil

     IT READINESS, BROADBAND DEPLOYMENT
  1. Is there a National Broadband Plan?                                                                                  • The 2010 Argentina       • By 2020:                    • By 2019:
                                                                                                                            Conectada plan promoted    -- The National Broadband     -- National average
                                                                                                                            digital inclusion, but        Network (NBN) is              broadband speed o
                                                                                                                            did not include specific      forecast to provide           25 Mbps
                                                                                                                            national targets. No          8 million connections at
                                                                                                                            national broadband            speeds of 25–50 Mbps
                                                                                                                            strategy is in place.

  2. Is the National Broadband Plan being effectively implemented?
  3. Are there laws or policies that regulate “net neutrality”1?                                                             Extensive regulation            No regulation            Extensive regulation

  4. Base Indicators
4.1. Population (millions) (2015) — Total for all countries in this scorecard: 4,700 million                                          42                          24                             204
4.2. Urban Population (%) (2015) — Average for all countries in this scorecard: 73%                                                  92%                         89%                             86%
4.3. Number of Households (millions) (2015) — Total for all countries in this scorecard: 1,249 million                                12                           9                              60
4.4. Population Density (people per square km) (2015) — Average for all countries in this scorecard: 471                              16                           3                              25
4.5. Per Capita GDP (US$ 2015) — Average for all countries in this scorecard: US$ 22,649                                           $13,432                     $56,311                       $8,539
4.6. ICT Service Exports (billions of US$) (2015) — Total for all countries in this scorecard: US$ 978 billion                        $6                          $9                             $19
4.7. Personal Computers (% of households) (2015) — Average for all countries in this scorecard: 63%                                  65%                         83%                             54%
  5. IT and Network Readiness Indicators
5.1. ITU ICT Development Index (IDI) (2016) (score is out of 10 and covers 175 countries)
                                                                                                                                     6.52                        8.19                            5.99
     — Average for all countries in this scorecard: 6.58
5.2. World Economic Forum Networked Readiness Index (NRI) (2016) (score is out of 7 and covers 139 countries)
                                                                                                                                     3.79                        5.49                            4.01
     — Average for all countries in this scorecard: 4.77
  6. Internet Users and International Bandwidth
6.1. Internet Users (millions) (2015) — Total for all countries in this scorecard: 2,330 million                                      29                          20                             120
6.2. Internet Users (% of population) (2015) — Average for all countries in this scorecard: 67%                                      69%                         85%                             59%
6.3. International Internet Bandwidth (total gigabits per second (Gbps) per country) (2015)
                                                                                                                                    1,350                       1,650                            5,250
     — Total for all countries in this scorecard: 117,736 Gbps
6.4. International Internet Bandwidth (bits per second (bps) per Internet user) (2015)
                                                                                                                                    46,145                      81,564                       43,634
     — Average for all countries in this scorecard: 97,747 bps
  7. Fixed Broadband
7.1. Fixed Broadband Subscriptions (millions) (2015) — Total for all countries in this scorecard: 697 million                         7                            7                              25
7.2. Fixed Broadband Subscriptions (% of households) (2015) — Average for all countries in this scorecard: 63%                       59%                         75%                             42%
7.3. Fixed Broadband Subscriptions (% of population) (2015) — Average for all countries in this scorecard: 21%                       16%                         29%                             12%
7.4. Fixed Broadband Subscriptions (% of Internet users) (2015) — Average for all countries in this scorecard: 29%                   23%                         34%                             21%
7.5. Average Broadband Data Connection Speed (total megabits per second (Mbps) per country) (Q1 2017)
     — Average for all countries in this scorecard: 12 Mbps                                                                           6                           11                              7
     — Average peak for all countries in this scorecard: 70 Mbps
  8. Fiber-to-the-home/building (FttX)
8.1. Fiber-to-the-home/building (FttX) Internet Subscriptions (millions) (2015)
                                                                                                                                     0.1                          0.6                             1.3
     — Total for all countries in this scorecard: 258 million
8.2. Proportion of Fiber-to-the-home/building (FttX) Internet Subscriptions (% of households) (2015)
                                                                                                                                     1%                           7%                              2%
     — Average for all countries in this scorecard: 18%
8.3. Proportion of Fiber-to-the-home/building (FttX) Internet Subscriptions (% of fixed broadband subscriptions) (2015)
                                                                                                                                     2%                           9%                              5%
     — Average for all countries in this scorecard: 23%
  9. Mobile Broadband
9.1. Mobile Cellular Subscriptions (millions) (2015) — Total for all countries in this scorecard: 4,823 million                       62                          32                             258
9.2. Number of Active Mobile Broadband Subscriptions (millions) (2015)
                                                                                                                                      33                          27                             180
     — Total for all countries in this scorecard: 2,506 million
9.3. Active Mobile Broadband Subscriptions (% of population) (2015) — Average for all countries in this scorecard: 77%               78%                        113%                             89%
9.4. Average Mobile Data Connection Speed (total megabits per second (Mbps) per country) (Q1 2017)
                                                                                                                                      5                           16                              5
     — Average for all countries in this scorecard: 11 Mbps

                  IT Readiness (Country Ranking Out of 24)
                                                                     Highest                                                                                       Lowest

      20                                                                                                                                                     BSA | The Software Alliance
You can also read